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DETAILED ACTION 



1 . This office action is in response to applicant's response filed on 06/26/2008. 

2. Claims 1-9, 11-16, 19-21, 26, 28-48, and 50-56 are pending. 

3. Claims 10, 17-18, 22-25, 27, and 49 are cancelled. 

4. Claims 1 , 26-28, 32, 37-38, 42, 45, and 47 are amended. 

5. Applicant's arguments have been fully considered but they are not persuasive. 

6. When responding to the Office action, Applicant is advised to clearly point out the 
patentable novelty the claims present in view of the state of the art disclosed by the 
reference(s) cited or the objection made. A showing of how the amendments avoid such 
references or objections must also be present. See 37 C.F.R. 1 .1 1 1(c). 



Response to Arguments 



1. Applicant, on pages 13-14, 15-16, of the remarks, argues in the method of claim 
1 , 26, and 42, argues "Neither Serbinis nor Saito, teach or suggest providing an access 
token to the available network resource, the access token operable to allow an 
application of the available network resource to access a portion of the network, 
wherein providing the access token to the resource comprises providing access to the 
application of the available network resource, the application operable to perform a 
specified task by an administrator." 
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Further referring to claim 1 , neither Serbinis nor Saito, when taken alone or in 
combination, teach or suggest "providing a task associated with the access token, 
wherein the completion of the task terminates the access token or maintaining a task 
status for the task associated with the access token." 

Examiner respectfully disagrees and asserts that Serbinis or Saito, when taken 
alone or in combination, teach or suggests that an Internet-based document 
management system and methods are provided wherein access to the system and its 
services may be controlled through use of access tokens. The Internet-based document 
management system allows an electronic document to be stored on an Internet- 
accessible server and accessed using a previously known web browser, downloaded for 
review or manipulation, and then returned to the server for access by further users. The 
server is programmed to generate and validate access tokens and provide a plurality of 
services supported by a common database and document store, including storage and 
retrieval services, an electronic document delivery service, a document distribution 
service, a collaborative file sharing service and a workflow service. The system 
preferably also is programmed with a security function, a filtering function, accounting 
functions that enable detailed accounting of transactions occurring on the system, and a 
customization function that permits multiple service providers to utilize the common 
document management services of a server, while presenting end-users with distinct 
dedicated websites [see, for example, Serbinis: abstract, 21:1-11, 21:30-51, 4:12-20]. 

Saito teaches networked computers or terminals that have access to secure 
information, such as financial information, intelligence information, and the like. Another 
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example of a secure component 102 would be an entry device into a particular area, 
such as a vault or an area containing sensitive information. Yet another implementation 
of a secure component 1 02 would be a computer which is part of a network that allows 
general access to some portions of the network but allows access to other portions of 
the network only to selected individuals [paragraph 33 and fig. 2] and one common 
type of security protocol is a Type II security protocol wherein the individuals are 
assigned a uniquely coded physical item, such as a token, key card, etc. that must be 
inserted into an access device 103 (FIG. 2) to gain access to the secured component 
102 [paragraph 65 and fig. 2]. 

2. Examiner, however, in light of the above submission maintains the previous 
rejections while considering the amendments to the claims as follows: 



Claim Rejections - 35 USC § 103 



1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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2. Claims 1-9, 11-16, 19-21, 26, 28-48, and 50-56 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Serbinis et al. Patent No.: US 6,314,425 B1 in view 
of Saito, Pub. No.: US 2005/0071673 A1 . 

Referring to claims 1 , 1 1 , 14, 19, 26, 32-34, 36, 39, and 42, Serbinis teaches a 
system and a method for providing network access comprising: 

identifying an available network resource [col. 2, lines 15-37], 

providing an access token to the available network resource [abstract, col. 4, 
lines 12-20; the server provides/generates an access token]; 

terminating the access token [col. 21, lines 1-11; col. 21, lines 30-51]. Sebrinis 
further teaches tracking the status of the access token [col. 21, lines 30-51]. Sebrinis 
does not appear to explicitly teach the network resource coupled to a network and the 
access token operable to allow an application of the available network resource to 
access a portion of the network. Saito teaches networked computers or terminals that 
have access to secure information, such as financial information, intelligence 
information, and the like. Another example of a secure component 102 would be an 
entry device into a particular area, such as a vault or an area containing sensitive 
information. Yet another implementation of a secure component 102 would be a 
computer which is part of a network that allows general access to some portions of the 
network but allows access to other portions of the network only to selected individuals 
[paragraph 33 and fig. 2] and one common type of security protocol is a Type II 
security protocol wherein the individuals are assigned a uniquely coded physical item, 
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such as a token, key card, etc. that must be inserted into an access device 103 (FIG. 2) 
to gain access to the secured component 102 [paragraph 65 and fig. 2]. Sebrinis and 
Saito are analogous art because both teach secure authentication using access tokens. 

At the time of the invention, it would have been obvious to one of ordinary skill in 
the art to modify the method of Sebrinis to include a computer which is part of a network 
that allows access to other portions of the network by using access token of Saito 
because access token helps individual, to gain access to a particular secure 
component, area or information, please see KSR International Co. v. Teleflex Inc., 550 
U.S-, 82 USPQ2d 1385 (2007) for further interpretation. 

Referring to claims 2, 35 and 51, Sebrinis teaches a system and a method for 
providing network access, wherein the at least one available network resource 
comprises a terminal coupled to the network, the terminal comprising a processor 
having available processing capability [col. 1, lines 17-26; col. 5, lines 21-30 and fig. 
1A-1B]. 

Referring to claim 3, Sebrinis teaches a system and a method for providing 
network access, wherein the available network resource is a server [abstract, col. 4, 
lines 12-20]. 

Referring to claims 4, 13, 16, 29, 31, 50 and 53, Sebrinis as modified teaches a 
system and a method for providing network access, wherein the resource comprises a 
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server, the server coupled to a sub-group, the sub-group coupled to a super-group via a 
sub-network, the super- group coupled to the resource communication module via the 
network [Saito, paragraphs 33, 65 and fig. 2; secured components 102 coupled with 
each other and coupled with communication device 120]. 

Referring to claims 5, 12, 15, 28, 30 and 52, Sebrinis as modified teaches a 
system and a method for providing network access, wherein the resource comprises a 
server, the server coupled to a super-group, the super-group coupled to the resource 
communication module via the network [Saito, paragraphs 33, 65 and fig. 2]. 

Referring to claims 6, 7 and 8, Sebrinis as modified teaches a system and a 
method for providing network access, wherein the network is an intranet [Saito, 
paragraphs 5 and 33]. 

Referring to claim 9, Sebrinis teaches a system and a method for providing 
network access, wherein providing the access token to the resource comprises 
providing a user identification and password to the internet protocol address of the 
resource [col. 21, lines 13-51]. 

Referring to claim 20, Sebrinis teaches a system and a method for providing 
network access, wherein the status of the access token comprises the application using 
the access token [col. 21, lines 30-51]. 



Application/Control Number: 10/759,960 
Art Unit: 2134 



Page 8 



Referring to claims 21 and 45, Sebrinis teaches a system and a method for 
providing network access, wherein the status of the access token comprises the internet 
protocol address of the available network resource to which the access token was 
provided [col. 21, lines 13-51]. 

Referring to claims 54 and 55, Sebrinis as modified teaches a system and 
a method for providing network access, wherein the available network resource further 
comprises a network resource used simultaneously by a user, the user having an 
access level unrelated to the access token [Saito, paragraphs 5, 7-8, 10, 33 and 59]. 

Referring to claims 37 and 38, Sebrinis teaches a system and a method for 
providing network access, wherein the access token is operable to expire in a pre- 
determined length of time [col. 21, lines 1-11; col. 21, lines 30-51]. 

Referring to claim 40, Sebrinis as modified teaches a system and a method for 
providing network access, wherein the task comprises a file search on the portion of the 
network [Saito, paragraph 45]. 

Referring to claims 41, 43 and 56, Sebrinis teaches a system and a method for 
providing network access, further comprising a database, the database operable to 
store the status of the access token and the resource [col. 21, lines 30-51]. 
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Referring to claims 44 and 46, Sebrinis as modified teaches a system and a 
method for providing network access, wherein the resource communication module is 
further operable to receive notification from the resource that the resource has available 
processing capability [Saito, paragraph 36 and fig. 2]. 

Referring to claim 47, Sebrinis as modified teaches a system and a method for 
providing network access, wherein the resource communication module is further 
operable to transmit a task to the resource, wherein the task is specific to a first 
application resident in the resource, the task capable of performance by the available 
processing capability [Saito, paragraph 36, 38, 47 and fig. 2]. 

Referring to claim 48, Sebrinis as modified teaches a system and a method for 
providing network access, wherein the resource is concurrently engaged by a user, the 
user accessing a second application, the second application accessing processing 
capability separate from the available processing capability [Saito, paragraph 33-36 
and fig. 2]. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to YONAS BAYOU whose telephone number is (571)272- 
7610. The examiner can normally be reached on m-f,7:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Yonas Bayou/ 
Examiner, Art Unit 2134 
08/04/2008 
/Kambiz Zand/ 

Supervisory Patent Examiner, Art Unit 2134 



